skills.rest
JotJunior
JotJuniorCOMMUNITY
Explore all skills by this author →
𝕏@jotjrGitHub

owasp-security

Apply OWASP Top 10:2025 and ASVS 5.0 standards during code review.

21|4|Updated Jan 8, 2026
Search Tags:#security#authentication#owasp#input-validation#code-review#threat-model#asvs
One-click install
npx skills add https://github.com/JotJunior/claude-ai-tips --skill owasp-security-jotjunior
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: owasp-security
Source: https://github.com/JotJunior/claude-ai-tips/tree/main/global/skills/owasp-security
Command: npx skills add https://github.com/JotJunior/claude-ai-tips --skill owasp-security-jotjunior

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers and security reviewers identify and remediate common vulnerabilities by applying OWASP Top 10:2025, ASVS 5.0, and agentic AI security practices during code reviews and architecture design.

Core Features & Use Cases

  • Comprehensive security review checklists covering authentication, input validation, cryptography, error handling, logging, and software supply chain considerations.
  • Guidance for threat modeling, secure design patterns, and secure coding practices across languages and agent systems.
  • Use Case: during a code review or API design session, apply the guidelines to uncover security gaps and drive remediations.

Quick Start

Review your codebase using OWASP Top 10:2025 and ASVS 5.0 guidelines to identify and remediate security gaps.

Frequently Asked Questions about owasp-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 code review to find security vulnerabilities?▼

Perform an OWASP Top 10 code review by applying structured checklists for input validation, authentication, and cryptography to identify and remediate common software security risks across languages and architectures.

What is ASVS 5.0 and how does it guide secure API design?▼

ASVS 5.0 is an Application Security Verification Standard that guides secure API design by enforcing structured requirements for secure session handling, logging, and error handling during security assessments and feature development.

Can I use this OWASP security guidance for any programming language and architecture?▼

Yes, you can use this OWASP security guidance across languages and architectures, as it enforces universal secure design patterns and threat modeling practices applicable during diverse code reviews and feature development.

What's the best way to mitigate software supply chain risks during development?▼

Mitigate software supply chain risks by applying OWASP Top 10:2025 guidelines during code reviews, utilizing structured checklists that enforce secure coding practices and comprehensive threat modeling assessments.

How do I validate input and handle errors securely according to OWASP standards?▼

Validate input and handle errors securely by applying ASVS 5.0 standards, which provide structured checklists to enforce robust input validation, secure logging, and safe error handling mechanisms during code reviews.

Related Skills

Explore More Software Engineering Skills→
BautistaPessagnoBautistaPessagno

owasp-security

Review codebases against OWASP Top 10:2025 and ASVS 5.0 security controls.

Community
Advanced
protofireprotofire
3

protofire-qa-agent

Audit smart contracts with Slither, Echidna, and Foundry fuzz testing.

Official
Advanced
ms-moarms-moar

security-check

Audit codebases for OWASP Top 10 vulnerabilities and insecure patterns.

Community
Advanced
Renzo-TognellaRenzo-Tognella

security-best-practices

Detect security vulnerabilities in Python, JavaScript/TypeScript, and Go codebases.

Community
Advanced